Authentication
Access to protected product areas requires authenticated sessions.
Security
Security and Data Protection
Offsite Creator is designed around explicit authentication, authorization boundaries, seller isolation, and minimizing unnecessary data access.
Role-Based Access Control
Application permissions are constrained by assigned roles and authorized actions.
Seller Organization Isolation
Server-side boundaries are used to keep seller organization context separated.
Server-Side Authorization
Protected operations enforce authorization on the server rather than relying only on interface visibility.
Data Minimization
Integration design aims to request and process only data required for supported workflows.
HTTPS
Public web traffic is served over encrypted HTTPS connections.
Audit-Oriented Controls
Operational controls are designed to preserve evidence and make authorization decisions reviewable.
Seller-Controlled Authorization
Third-party commerce access begins with seller authorization and remains subject to provider controls.
Security claims remain evidence-based
Security descriptions on this site are limited to implemented controls and do not imply external certifications that have not been independently verified.